Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa
File:                     0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa (raw, json)
Hash identifier:          w1P3fSQfPEyNWcbm9Mpsb5neZ0w8WxrQ976HK2k/Wwo=
Subject key identifier:   40:02:02:D4:08:A9:37:51:18:61:CB:8F:B6:23:34:2C:9B:A5:C4:07
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F43285849AD1A10BAC274746FA1FC4368
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:10:ba:c2:74:74:6f:a1:fc:43:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=c807a7b3-29af-441a-8a34-3755d29ecac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:08:65:24:5f:e2:da:b0:65:05:19:89:9b:
                    a6:e2:d5:ca:66:9f:e2:0a:2c:07:e9:44:ab:e3:99:
                    6b:13:5f:97:ab:6f:9b:56:66:12:81:12:bd:51:25:
                    92:b2:65:aa:f8:ca:1f:0f:55:63:ad:d0:1e:13:3a:
                    63:3e:18:92:a2:d7:db:80:55:a2:53:57:ac:3c:c1:
                    f5:63:c7:4e:e6:7c:55:c9:07:99:8f:bd:29:7d:f8:
                    66:ab:01:9f:9f:47:ac:d6:51:16:ff:77:84:73:41:
                    ff:98:57:15:7d:04:18:8c:74:f7:08:93:d9:48:17:
                    ff:02:a8:6f:1d:35:8b:87:11:c3:46:1b:93:ae:ac:
                    77:e8:fc:6f:6d:ae:c6:83:50:b7:eb:c8:0c:f5:71:
                    a7:b6:44:05:2b:66:4e:f8:93:cd:fd:9d:aa:ab:fa:
                    97:36:c1:c7:9a:05:c3:75:ac:d6:2e:1d:f0:06:86:
                    c2:5e:63:39:3d:e6:27:4e:f0:18:bf:29:af:3d:4e:
                    21:d9:f2:78:fe:40:4b:5f:52:b5:90:45:53:cb:ea:
                    15:05:d8:f7:ff:73:80:6b:31:e3:77:04:21:fc:1b:
                    94:68:be:43:e8:fa:93:48:11:fa:6e:3a:1b:42:8a:
                    92:a6:cc:08:4e:b1:73:2c:ec:bb:83:a8:be:68:82:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:02:02:D4:08:A9:37:51:18:61:CB:8F:B6:23:34:2C:9B:A5:C4:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:86:05:77:7f:0a:10:a0:9c:52:1d:f7:95:f4:3d:03:25:ea:
         76:22:66:92:dc:06:b6:f6:c5:1a:1a:c1:3e:42:22:bf:e5:a4:
         ac:80:99:49:56:8f:ae:99:9b:41:d6:fe:d5:8d:f4:d4:9a:67:
         b0:ee:c5:ef:b2:00:c5:f0:a8:2f:63:da:24:cb:4d:01:35:02:
         6e:b3:52:60:4e:14:d8:fb:f2:30:b9:9c:61:28:de:52:90:1d:
         7b:48:3e:b7:a1:4c:42:df:75:75:b9:69:a6:d0:0c:e2:a3:26:
         71:f9:e7:0a:8a:3f:42:8d:0d:b0:66:af:22:f0:fa:d4:f4:48:
         39:8f:fd:66:3d:50:9d:0b:c9:fc:c7:35:22:0c:0f:2c:5e:60:
         35:a0:c4:2f:67:b0:92:89:4a:a1:14:cf:0e:38:cd:65:96:e9:
         37:cb:9a:da:1c:96:c7:ff:38:fe:cf:a1:e0:d5:51:82:be:2e:
         7c:04:7d:10:ed:4e:5f:07:c2:77:a3:f3:16:d9:52:4e:e9:52:
         63:71:02:46:fe:5a:65:92:3c:3c:1a:c2:1c:bb:5e:df:0d:0f:
         d0:16:4b:41:08:0f:e3:01:c9:95:08:b0:a3:61:86:7a:57:1e:
         2d:76:eb:9a:17:d6:20:ca:e7:4a:9d:7e:d0:f6:bd:0b:df:e4:
         53:9b:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:37 2025 by rpki-client